package com.employeemanage.config;

import org.springframework.context.annotation.Bean;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.security.crypto.password.PasswordEncoder;

@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .csrf().disable()
            .authorizeRequests()
                .anyRequest().permitAll();
//            .antMatchers("/employee/**").permitAll() // 放行所有 /employee 路径
//            .antMatchers("/product/**").permitAll() // 放行所有 /employee 路径
//            .antMatchers("/supplier/**").permitAll() // 放行所有 /employee 路径
//            .antMatchers("/employee-pet/**").permitAll()
//            .anyRequest().authenticated(); // 其他接口需要认证
    }

    @Bean
    public PasswordEncoder passwordEncoder() {
        return new BCryptPasswordEncoder();
    }
} 
